$ rpki-client -vvvf rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft File: 5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft (raw, json) Hash identifier: BiBWB7nFmpmBWBNC/rT/ngwPOq3Tv9AqQHqA0YFvp9I= Subject key identifier: 23:40:42:BB:31:8E:D6:C4:DC:34:05:7C:FE:8C:27:45:A9:31:34:4E Authority key identifier: 5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB Certificate issuer: /CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB Certificate serial: 7406CB5ACA37D1F6C88ED32DB29290E955436778 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 08:54:33 +0000 Manifest this update: Thu 17 Sep 2026 08:49:33 +0000 Manifest next update: Fri 18 Sep 2026 10:03:33 +0000 Files and hashes: 1: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: U6ZrAajnenCJBZYC9uBM6kAorfrc1n55yTDGAGbaXuI=) 2: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: GheubIEbC2RH3FMbulGJZm2AS1TBwHys9ZC8vY6htKI=) 3: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: Mx1Bs+uk4ORbPOJY3X4OSkdxpVJJ2TqdAiAI7XjMvYw=) 4: 5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl (hash: /VFEYS/yi+/fSdyV9AffzjX8ngZT9ZmDkrpCSlNnLZ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:06:cb:5a:ca:37:d1:f6:c8:8e:d3:2d:b2:92:90:e9:55:43:67:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E25E75EAD14FB9C877775CFA5C768C99BF831CB Validity Not Before: Sep 17 08:49:33 2026 GMT Not After : Sep 18 10:03:33 2026 GMT Subject: CN=234042BB318ED6C4DC34057CFE8C2745A931344E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:69:50:07:12:ce:4e:31:76:02:7a:ba:a3:bc: c5:30:71:28:41:4d:75:ab:57:88:61:ad:e2:08:2f: 16:e5:b8:8c:62:62:28:83:0d:6c:32:2f:99:42:b7: eb:ad:c7:42:29:01:22:e4:52:26:ee:7d:be:95:62: 4e:08:e9:2b:82:21:17:75:0d:fe:5f:0b:5f:3b:8e: 63:31:c3:1f:33:d7:d0:e0:66:7a:80:03:f9:38:61: 38:6f:11:3e:62:cb:b0:bf:dc:84:0f:e7:9b:93:cd: 2a:c0:3c:50:24:97:0a:52:77:50:eb:9e:02:fe:da: 59:13:ac:34:c1:83:89:6a:59:97:ab:d0:ce:92:80: 11:f6:8d:c3:a4:62:ea:b9:b0:b1:f1:1b:36:22:b5: 18:4d:49:5d:3f:ea:4c:d7:ae:56:26:d7:00:bc:62: 82:b5:7f:29:38:43:fd:b5:79:b3:2f:cf:1b:ae:9f: c5:12:22:b4:56:4d:89:0f:75:23:2a:8e:08:9c:3c: e3:58:0d:d6:14:8a:08:16:1c:b8:47:91:ad:4b:5b: 60:c8:b0:87:1c:7b:6b:6a:22:8b:1f:dc:b1:f0:2d: d8:cf:c3:ca:d0:41:19:ae:d3:88:5c:ff:20:e6:51: e0:c0:a3:e7:34:98:56:6d:ca:1b:1a:18:27:95:8f: 6d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:40:42:BB:31:8E:D6:C4:DC:34:05:7C:FE:8C:27:45:A9:31:34:4E X509v3 Authority Key Identifier: keyid:5E:25:E7:5E:AD:14:FB:9C:87:77:75:CF:A5:C7:68:C9:9B:F8:31:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/5E25E75EAD14FB9C877775CFA5C768C99BF831CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ca:89:80:a6:b3:1e:7e:66:f5:6c:f0:78:33:24:8e:47:14: d6:c7:b2:1e:fc:cc:5a:31:b0:0c:81:1f:3f:96:4d:d2:04:d2: d4:1e:68:62:26:f9:2f:e0:8f:54:81:bf:3b:ac:77:35:98:d5: 70:7d:07:df:f8:ce:2a:99:07:b9:2b:2a:34:f5:cb:c0:15:cf: 7e:a8:92:a7:33:3f:36:59:7b:3a:d0:89:cf:ff:bd:a0:33:9b: 52:32:53:12:c1:8c:05:d1:7c:aa:2c:c9:35:5b:18:c8:6a:91: be:03:3f:5f:7e:20:55:30:3d:f6:c7:a5:7c:53:09:c7:72:76: 5a:07:9e:9d:e2:22:fb:b2:2a:3a:22:9d:30:c5:00:45:ac:e1: 45:38:bd:cf:0d:3e:d1:b8:6c:be:25:27:c3:fd:20:0c:e4:e5: e1:01:50:c0:ec:51:ff:37:33:82:91:be:81:38:f9:5a:d6:c5: 96:d6:9d:0a:ee:2c:f7:7e:18:89:e3:ab:0e:b2:cd:60:eb:5a: 03:e7:87:fd:76:75:f5:4b:5e:b3:f2:d9:cf:e5:12:60:30:d3: bd:c6:97:73:5a:62:19:09:1b:49:14:e5:0a:07:e7:86:94:dc: 7c:3a:05:a1:b6:9f:28:f7:4d:29:b1:99:5b:11:ad:d2:32:3f: 16:9f:db:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdAbLWso30fbIjtMtspKQ6VVDZ3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5 QkY4MzFDQjAeFw0yNjA5MTcwODQ5MzNaFw0yNjA5MTgxMDAzMzNaMDMxMTAvBgNV BAMTKDIzNDA0MkJCMzE4RUQ2QzREQzM0MDU3Q0ZFOEMyNzQ1QTkzMTM0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVaVAHEs5OMXYCerqjvMUwcShB TXWrV4hhreIILxbluIxiYiiDDWwyL5lCt+utx0IpASLkUibufb6VYk4I6SuCIRd1 Df5fC187jmMxwx8z19DgZnqAA/k4YThvET5iy7C/3IQP55uTzSrAPFAklwpSd1Dr ngL+2lkTrDTBg4lqWZer0M6SgBH2jcOkYuq5sLHxGzYitRhNSV0/6kzXrlYm1wC8 YoK1fyk4Q/21ebMvzxuun8USIrRWTYkPdSMqjgicPONYDdYUiggWHLhHka1LW2DI sIcce2tqIosf3LHwLdjPw8rQQRmu04hc/yDmUeDAo+c0mFZtyhsaGCeVj23xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI0BCuzGO1sTcNAV8/ownRakxNE4wHwYDVR0j BBgwFoAUXiXnXq0U+5yHd3XPpcdoyZv4McswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg2ZDZiYTEtMWY3My00Nzc2LThhNmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVB RDE0RkI5Qzg3Nzc3NUNGQTVDNzY4Qzk5QkY4MzFDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RTI1RTc1RUFEMTRGQjlDODc3Nzc1Q0ZBNUM3NjhDOTlCRjgz MUNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNUUyNUU3NUVBRDE0RkI5Qzg3Nzc3NUNGQTVDNzY4 Qzk5QkY4MzFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHKiYCmsx5+ZvVs8HgzJI5HFNbHsh78zFox sAyBHz+WTdIE0tQeaGIm+S/gj1SBvzusdzWY1XB9B9/4ziqZB7krKjT1y8AVz36o kqczPzZZezrQic//vaAzm1IyUxLBjAXRfKosyTVbGMhqkb4DP19+IFUwPfbHpXxT CcdydloHnp3iIvuyKjoinTDFAEWs4UU4vc8NPtG4bL4lJ8P9IAzk5eEBUMDsUf83 M4KRvoE4+VrWxZbWnQruLPd+GInjqw6yzWDrWgPnh/12dfVLXrPy2c/lEmAw073G l3NaYhkJG0kU5QoH54aU3Hw6BaG2nyj3TSmxmVsRrdIyPxaf29o= -----END CERTIFICATE-----Generated at Thu Sep 17 12:45:04 2026 by rpki-client